Looking for AMD EPYC VM offers with SEV enabled
In short, EPYC have AMD Secure Encrypted Virtualization, which encrypts VM memory transparently with a key unique to the VM. The key is generated via hardware and not available to other VMs or (ideally) even the hypervisor.
There are attacks from hypervisor and can only be mitigated with 3rd gen models' SEV-SNP. So I'm looking for a Milan EPYC with SEV enabled, but 1st and 2nd gen are fine too, since SEV significantly raised the security bar from plain text memory.